✕
Request a Demo
Rewterz
Rewterz Threat Alert – AsyncRAT – Active IOCs
December 16, 2022
Rewterz
Rewterz Threat Alert – GandCrab Ransomware – Active IOCs
December 16, 2022

Rewterz Threat Advisory – CVE-2020-4497 – IBM Spectrum Protect Plus Vulnerability

Severity

Medium

Analysis Summary

CVE-2022-4497

IBM Spectrum Protect Plus 10.1.0 through 10.1.12 discloses sensitive information due to unencrypted data being used in the communication flow between Spectrum Protect Plus vSnap and its agents. An attacker could obtain information using main in the middle techniques. 

Impact

Information Disclosure

Indicators Of Compromise

CVE

  • CVE-2022-4497

Affected Vendors

IBM

Affected Products

  • IBM Spectrum Protect Plus 10.1.0
  • IBM Spectrum Protect Plus 10.1.12

Remediation

Refer to IBM Security Advisory for patch, upgrade or suggested workaround information.

IBM Security Advisory